$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/AD0C045C8C8511F0B59F1C60C4F9AE02.roa File: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (raw, json) Hash identifier: HGdDjcoTsUm7kJL5rC6tXKA4D2ZhJnskWqB8F3KifFs= Subject key identifier: 0C:21:B1:C8:FE:1C:7D:57:28:D1:F1:D6:6C:0B:F7:80:5D:D5:C1:E8 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 01D2 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/AD0C045C8C8511F0B59F1C60C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:23:37 +0000 ROA not before: Sat 27 Dec 2025 03:23:23 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152147 IP address blocks: 2001:df3:4240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Dec 27 03:23:23 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43dd9-f530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2f:ad:57:c6:c2:c1:3f:c4:92:aa:f5:86:6b: 60:37:d9:d0:d7:9d:e5:d5:76:87:a1:23:aa:5c:d5: 50:b9:5b:90:7a:63:66:10:94:0d:d6:33:04:4e:8d: be:e5:de:98:cf:bf:ae:96:0c:da:d8:c5:e2:3d:3a: 7a:76:03:b8:bd:fc:32:57:87:b5:bd:da:3e:4a:ad: 6c:32:c9:17:da:a8:57:36:93:19:36:8c:35:5f:94: 8d:17:ff:ef:e3:93:2e:fd:a2:96:f5:bc:31:1c:25: 4a:dd:65:7c:ce:3d:96:92:80:8d:1b:16:f2:e1:78: f5:b8:e3:b1:c6:a5:37:c8:06:79:dc:ae:b5:4a:5c: 25:06:56:fe:ee:e6:bd:64:60:83:d4:2e:2a:38:b1: 9f:e2:6e:37:d2:eb:28:39:44:59:87:58:da:d7:74: 26:ed:ec:ae:70:4f:aa:a1:f1:2b:94:5b:21:55:b4: 47:53:11:f7:24:e4:d9:fe:96:7a:ae:c6:d9:1c:e2: 6d:b6:5c:43:ae:70:fa:47:4c:cd:54:86:12:b4:28: c6:bd:6a:ce:cf:aa:c7:6a:2b:60:7c:3c:5e:76:88: 63:81:90:70:32:08:94:a2:2e:1f:c2:e0:75:7f:bb: d4:59:49:e3:09:f4:a9:e6:79:c6:ba:b3:e3:72:fa: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:21:B1:C8:FE:1C:7D:57:28:D1:F1:D6:6C:0B:F7:80:5D:D5:C1:E8 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/AD0C045C8C8511F0B59F1C60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:4240::/48 Signature Algorithm: sha256WithRSAEncryption 70:5b:2e:12:c9:af:bb:33:59:f2:9a:10:13:f2:10:51:00:5f: 6a:21:99:bd:85:21:b5:f8:d3:e7:be:f3:04:a0:72:50:19:82: ea:46:b2:93:e0:81:b4:8e:b0:33:dc:10:c1:28:24:e6:95:81: e0:38:65:b0:b1:62:b2:58:cc:cc:1a:99:bf:58:1b:9b:4b:33: b7:1e:03:48:ed:95:d4:d8:6e:82:f6:ff:74:c9:75:98:58:03: 4d:fc:01:ae:18:89:24:6a:36:03:c5:af:2e:6b:0b:c9:c6:7f: 07:24:5f:8c:7e:74:51:16:dd:07:a7:7b:8d:c9:05:23:d9:a1: 43:57:1e:cb:0b:53:86:ad:19:8e:a0:82:4d:d2:9d:d6:7c:95: 3a:be:11:12:b0:60:12:38:6d:46:4b:ec:b2:4a:c3:3d:14:f1: bf:94:73:25:33:5c:5e:f2:ba:f4:ba:13:48:5f:b2:de:e1:49: aa:5c:45:eb:75:d4:b7:72:b7:61:c0:e0:28:23:5c:5e:f4:0d: 8d:25:97:75:f3:3d:9c:ae:59:02:9e:8b:0d:75:25:45:3c:ca: 7a:03:22:fc:77:83:19:a0:08:09:28:2f:79:f1:c3:8e:bf:ff: 04:fb:c2:06:23:22:0d:b6:b1:5f:21:8b:3e:a9:7a:72:c6:d6: 3b:b2:f2:6e -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUxMjI3MDMyMzIzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2RkOS1mNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhS+tV8bCwT/Ekqr1hmtgN9nQ153l1XaHoSOqXNVQuVuQemNmEJQN1jMETo2+ 5d6Yz7+ulgza2MXiPTp6dgO4vfwyV4e1vdo+Sq1sMskX2qhXNpMZNow1X5SNF//v 45Mu/aKW9bwxHCVK3WV8zj2WkoCNGxby4Xj1uOOxxqU3yAZ53K61SlwlBlb+7ua9 ZGCD1C4qOLGf4m430usoOURZh1ja13Qm7eyucE+qofErlFshVbRHUxH3JOTZ/pZ6 rsbZHOJttlxDrnD6R0zNVIYStCjGvWrOz6rHaitgfDxedohjgZBwMgiUoi4fwuB1 f7vUWUnjCfSp5nnGurPjcvrXxwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFAwhscj+ HH1XKNHx1mwL94Bd1cHoMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA5QzUvNzRCMTZDNzY5NTk5MTFFRUJBM0NCMjc1QzRGOUFFMDIvQUQwQzA0NUM4 Qzg1MTFGMEI1OUYxQzYwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN80JAMA0GCSqGSIb3DQEBCwUAA4IBAQBwWy4Sya+7M1nymhAT 8hBRAF9qIZm9hSG1+NPnvvMEoHJQGYLqRrKT4IG0jrAz3BDBKCTmlYHgOGWwsWKy WMzMGpm/WBubSzO3HgNI7ZXU2G6C9v90yXWYWANN/AGuGIkkajYDxa8uawvJxn8H JF+MfnRRFt0Hp3uNyQUj2aFDVx7LC1OGrRmOoIJN0p3WfJU6vhESsGASOG1GS+yy SsM9FPG/lHMlM1xe8rr0uhNIX7Le4UmqXEXrddS3crdhwOAoI1xe9A2NJZd18z2c rlkCnosNdSVFPMp6AyL8d4MZoAgJKC958cOOv/8E+8IGIyINtrFfIYs+qXpyxtY7 svJu -----END CERTIFICATE-----Generated at Mon Mar 2 15:27:06 2026 by rpki-client